Cookie Policy

01 What Are Cookies

1.1 Definition

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website or web application. Cookies are widely used by website operators to make their platforms function efficiently, to remember user preferences, and to provide reporting information.

1.2 Similar Technologies

In addition to cookies, we may use similar tracking technologies including web storage mechanisms such as localStorage and sessionStorage, which function similarly to cookies in that they store data on your device for use by the Platform. For the purposes of this policy, all such technologies are collectively referred to as "cookies" unless otherwise specified.

1.3 How Cookies Work

When you visit BioStackIQ, our server may place one or more cookies on your device. On subsequent visits, your browser sends these cookies back to our server, allowing the Platform to recognize your device, maintain your session, and recall certain preferences. Cookies do not typically contain personally identifiable information on their own but may be linked to personal data we hold about you.

02 How We Use Cookies

2.1 Core Purpose

BioStackIQ uses cookies for a narrow and specific set of purposes directly related to the operation and functionality of the Platform. We do not use cookies for advertising, behavioral tracking, cross-site surveillance, or third-party data sharing.

2.2 Specific Uses

We use cookies and similar storage technologies to:

• Maintain your authenticated session so you remain logged in as you navigate between pages
• Store your session token securely so the Platform can verify your identity on each request
• Remember your user interface preferences such as your active dashboard tab
• Preserve the state of in-progress actions such as protocol builds in progress
• Support security features including CSRF protection and session integrity validation
• Enable the Platform to function as intended across page navigations and browser sessions

03 Types of Cookies We Use

3.1 Overview

BioStackIQ uses a limited set of cookies that fall into two primary categories: strictly necessary cookies and functional cookies. We do not use advertising cookies, tracking cookies, or third-party behavioral cookies.

3.2 Summary Table

04 Strictly Necessary Cookies

4.1 Definition

Strictly necessary cookies are essential for the Platform to function. Without these cookies, core features such as user authentication, session management, and secure API communication cannot operate. Strictly necessary cookies do not require your consent under most privacy frameworks because they are technically required for the service you have requested.

4.2 Authentication Cookies

The majority of strictly necessary cookies on BioStackIQ are authentication-related and are managed through our infrastructure partner Supabase. These cookies store your session tokens and allow the Platform to verify your identity on each page load and API request without requiring you to re-enter your password. These tokens are cryptographically signed and cannot be used to access your account without the associated private key held on our servers.

4.3 Security Cookies

We use session identifiers and security tokens to protect the Platform against common web security vulnerabilities including cross-site request forgery. These cookies contain no personally identifiable information and are invalidated when your session ends or when you sign out.

4.4 Cannot Be Disabled

Because strictly necessary cookies are essential to the operation of the Platform, they cannot be disabled without preventing you from using BioStackIQ. If you disable these cookies through your browser settings, you will not be able to log in or use any features that require authentication.

05 Functional Cookies

5.1 Definition

Functional cookies allow the Platform to remember choices you make and provide enhanced, personalized features. These cookies may be set by us or by third-party providers whose services we have added to the Platform. The information these cookies collect may be anonymized and they cannot track your activity on other websites.

5.2 Preference Storage

BioStackIQ uses browser localStorage to store your UI preferences, including your last active dashboard tab and certain display settings. This data is stored locally on your device and is not transmitted to our servers. It is used solely to improve your experience within the Platform by remembering where you left off.

5.3 Optional Nature

Functional cookies are not strictly required for the Platform to operate. If you disable localStorage or clear your browser storage, the Platform will continue to function but will not remember your preferences between sessions. You will need to re-select your preferences on each visit.

06 Analytics and Performance Cookies

6.1 Current Status

BioStackIQ does not currently use third-party analytics cookies or performance monitoring cookies such as those provided by Google Analytics, Mixpanel, Hotjar, or similar services. We may collect aggregated, anonymized usage metrics through our own server logs, but this data is not linked to individual user identities and does not involve the placement of third-party cookies on your device.

6.2 Future Changes

If we introduce analytics tools in the future that require the use of cookies, we will update this Cookie Policy accordingly, notify users through the Platform, and provide appropriate consent mechanisms before any analytics cookies are placed on your device.

07 Third-Party Cookies

7.1 Supabase

Our authentication and database infrastructure is provided by Supabase. Supabase places authentication-related cookies on your device as part of the session management process. These cookies are strictly necessary for the Platform to function. For information about how Supabase handles cookie data, please refer to Supabase's privacy policy available at supabase.com.

7.2 No Advertising Cookies

BioStackIQ does not use advertising networks, retargeting platforms, social media tracking pixels, or any other third-party services that place advertising or behavioral tracking cookies on your device. We do not participate in any cross-site tracking ecosystems.

7.3 Affiliate Links

When you click an affiliate link on BioStackIQ that directs you to a third-party vendor site, that vendor may place their own cookies on your device in accordance with their own cookie policies. BioStackIQ has no control over third-party cookies placed after you leave our Platform. We encourage you to review the cookie policies of any third-party site you visit.

08 Cookies We Do Not Use

8.1 Explicit Exclusions

BioStackIQ does not use the following types of cookies or tracking technologies:

• Advertising or retargeting cookies from any ad network or demand-side platform
• Social media tracking pixels including those from Facebook, Instagram, TikTok, Twitter, or LinkedIn
• Behavioral profiling cookies that track your activity across multiple websites
• Fingerprinting technologies that identify your device without using traditional cookies
• Supercookies or evercookies designed to persist after standard cookie deletion
• Third-party analytics cookies from services such as Google Analytics, Adobe Analytics, or Mixpanel
• Heat mapping or session recording cookies from services such as Hotjar or FullStory
• A/B testing cookies from third-party optimization platforms

8.2 Commitment

This exclusion reflects our commitment to user privacy and our belief that a health and wellness platform has an elevated responsibility to protect the personal data of its users. We will not introduce any of the above cookie types without providing clear notice and obtaining appropriate consent.

09 Cookie Duration

9.1 Session Cookies

Session cookies are temporary cookies that are erased when you close your browser or end your browsing session. BioStackIQ uses session cookies primarily for authentication and security purposes. These cookies do not persist on your device beyond your active browsing session.

9.2 Persistent Cookies

Persistent cookies remain on your device for a set period of time after your browsing session ends. BioStackIQ uses persistent cookies for authentication refresh tokens, which allow you to remain logged in across browser sessions without re-entering your password. The duration of persistent cookies used by BioStackIQ is outlined in the cookie summary table in Section 3.

9.3 Clearing Cookies

You can clear all cookies from your device at any time through your browser settings. Note that clearing authentication cookies will log you out of BioStackIQ and any other websites where you are currently authenticated.

10 Managing and Disabling Cookies

10.1 Browser Controls

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to:

• Refuse all cookies
• Accept only first-party cookies and block third-party cookies
• Delete existing cookies from your device
• Receive a notification before a cookie is placed on your device
• Enable or disable JavaScript, which affects the operation of localStorage and sessionStorage

10.2 Browser-Specific Instructions

Instructions for managing cookies vary by browser. For guidance specific to your browser, refer to the following resources:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Settings > Privacy and Security > Cookies and Site Data
• Apple Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions > Cookies and site data
• Opera: Settings > Advanced > Privacy and Security > Site Settings > Cookies

10.3 Impact of Disabling Cookies

If you disable strictly necessary cookies, you will not be able to log in to BioStackIQ or use features that require authentication. If you disable functional cookies or clear localStorage, the Platform will continue to work but will not retain your preferences between sessions. Disabling cookies will not prevent you from accessing publicly available content on the Platform.

10.4 Do Not Track

Some browsers offer a "Do Not Track" signal that can be sent to websites you visit. BioStackIQ does not currently respond to Do Not Track signals because there is no industry-standard interpretation of how websites should respond to these signals. We will revisit this position if a uniform standard is established.

11 Your Consent

11.1 Basis for Use

By continuing to use BioStackIQ after being presented with information about our use of cookies, you consent to the use of strictly necessary and functional cookies as described in this policy. This consent is separate from the consent you provide when agreeing to our Terms of Service.

11.2 Withdrawing Consent

You may withdraw your consent to the use of non-essential cookies at any time by adjusting your browser settings to block or delete cookies as described in Section 10. Note that withdrawing consent for strictly necessary cookies will impair your ability to use the Platform.

11.3 Users in the European Economic Area

If you are located in the European Economic Area, our use of strictly necessary cookies is justified under the legitimate interests basis as these cookies are technically required to provide the service you have requested. For functional cookies that are not strictly necessary, we rely on your consent. You have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

11.4 Cookie Banner

Depending on your location and applicable law, you may be presented with a cookie consent notice when you first visit the Platform. This notice allows you to accept or decline non-essential cookies. Your selection will be stored and respected for future visits. You may update your cookie preferences at any time.

12 Changes to This Policy

We reserve the right to update this Cookie Policy at any time to reflect changes in our use of cookies, changes in applicable law, or changes to the services we use. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you through the Platform or by email. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Cookie Policy.

13 Contact Us

If you have questions about this Cookie Policy or our use of cookies, please contact us through the contact form at biostackiq.com/contact.html and select "Privacy or data request" as your topic. We respond to all privacy-related inquiries within 5 business days.